Make sure we create / delete SPDs and SADs on secondary node when it changes on primary. Fixes #2303

1 files changed, 9 insertions, 0 deletions

diff --git a/usr/local/www/xmlrpc.php b/usr/local/www/xmlrpc.php
index 19b9c80..1316322 100755
--- a/usr/local/www/xmlrpc.php
+++ b/usr/local/www/xmlrpc.php
@@ -39,6 +39,8 @@
 require("config.inc");
 require("functions.inc");
 require("filter.inc");
+require("ipsec.inc");
+require("vpn.inc");
 require("shaper.inc");
 require("xmlrpc_server.inc");
 require("xmlrpc.inc");
@@ -166,6 +168,8 @@ $restore_config_section_sig = array(
 function restore_config_section_xmlrpc($raw_params) {
 	global $config, $xmlrpc_g;
 
+	$old_config = $config;
+
 	if (xmlrpc_loop_detect())
 		log_error("Disallowing CARP sync loop");
 
@@ -270,6 +274,11 @@ function restore_config_section_xmlrpc($raw_params) {
 			interface_proxyarp_configure();
 	}
 
+	if (isset($old_config['ipsec']['enable']) !== isset($config['ipsec']['enable']))
+		vpn_ipsec_configure();
+
+	unset($old_config);
+
 	return $xmlrpc_g['return']['true'];
 }